Data Privacy & Compliance Specialist

Alto Software Group is a B2B SaaS company that powers more than half of all UK housing transactions each year. We create software solutions that connect businesses and consumers, delivering a one-stop shop for estate agents and home builders. Our goal is to drive efficiency, speed up transactions, reduce risk, and improve the end-customer experience. While we’re not a start-up, we have a start-up mindset and want our people to operate with this mindset so that we can achieve our ambitions.

The Role

We are looking for a Data Privacy & Compliance Specialist to own our individual rights and privacy compliance function. As our product reaches more of the UK housing market, the volume and complexity of our data obligations continues to grow — this role gives us the specialist capacity to handle that with rigour and care. You’ll work across the business as the go-to expert on UK GDPR, individual rights, and data-related complaints, operating at the intersection of legal compliance and real operational impact.

What You’ll Do

•      Manage the end-to-end lifecycle of Data Subject Access Requests (DSARs), Right to Erasure (RTBF), and Portability requests — from intake and verification through to fulfilment within the statutory one-month timeframe.

•      Perform meticulous reviews of personal data extracts, applying UK GDPR exemptions and carrying out necessary redactions to protect third-party privacy.

•      Act as first responder to privacy-related complaints from customers, employees, and third parties, handling each case with empathy and legal precision.

•      Support the DPO/Head of Legal in investigating potential data breaches, assessing risk to individuals, and preparing documentation for the ICO where required.

•      Maintain and update the Record of Processing Activities (ROPA) under Article 30, ensuring all data flows across the business are accurately documented.

•      Support departmental leads in completing Data Protection Impact Assessments (DPIAs) for new projects, tools, and product changes.

•      Provide pragmatic, accessible guidance to commercial, marketing, people, and product teams — translating legal obligation into practical action.

•      Deliver bite-sized privacy awareness sessions to staff, reducing human-error risk and building a data-conscious culture across the business.

What You Need to Be Successful

•      Experience in a dedicated data protection or privacy compliance role within a UK-based organisation.

•      Deep working knowledge of UK GDPR, the Data Protection Act 2018, PECR, and the Data Use and Access Act (DUAA).

•      Hands-on experience handling DSARs end to end — including redaction, application of exemptions, and meeting statutory deadlines.

•      Familiarity with ROPA maintenance and conducting or supporting DPIAs.

•      Experience with redaction software and case management tools; comfortable navigating business systems to locate personal data across platforms.

•      Strong written communication skills — able to produce clear, legally accurate responses to individuals and regulators.

•      A calm, methodical approach to complaint handling and incident response, particularly under time pressure.

•      A relevant qualification (e.g. BCS Certificate in Data Protection, CIPP/E, or equivalent) is a plus.

There’s always room to grow and learn with our roles — please don’t be put off if you don’t have all of these. It’s more important that you’re passionate about improving the home moving and owning experience for everyone.

Why Join Alto?

This role gives you genuine ownership of a compliance function that matters — at a company where data privacy isn’t a checkbox, it’s core to how we serve hundreds of thousands of people navigating one of life’s biggest transactions. You’ll have direct access to senior leadership and real scope to shape how we build privacy practices as the business scales. For someone who wants to move beyond reactive ticket-handling into a role with strategic visibility and cross-business influence, this is that opportunity.

•      Hybrid — 2 days/week in London HQ

•      Everyday Flex — greater flexibility over where and when you work

•      25 days annual leave — plus extra days for years of service

•      Day off for volunteering & Digital detox day

•      Festive Closure — business closed between Christmas and New Year

•      Cycle to work and electric car schemes

•      Free Calm App membership

•      Enhanced Parental leave

•      Fertility Treatment Financial Support

•      Group Income Protection & private medical

•      Gym on-site in London

•      7.5% pension contribution by company

•      Discretionary annual bonus up to 10% — of base salary

•      Talent referral bonus up to £5K